{"schema":"vulnpedia.research/1","cve":"CVE-2026-105221","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/defunkt/gist/issues/373","tags":["issue-tracking","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","url":"https://github.com/defunkt/gist/issues/373"},{"source":"nvd","sourceId":"CVE-2026-105221","modified":"2026-10-06T16:08:43.180","url":"https://github.com/defunkt/gist/issues/373"},{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://github.com/defunkt/gist/issues/373"}]},{"url":"https://github.com/defunkt/gist","tags":["product","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","url":"https://github.com/defunkt/gist"},{"source":"nvd","sourceId":"CVE-2026-105221","modified":"2026-10-06T16:08:43.180","url":"https://github.com/defunkt/gist"},{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://github.com/defunkt/gist"}]},{"url":"https://github.com/defunkt/gist/blob/v6.0.0/lib/gist.rb#L466-L468","tags":["technical-description","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","url":"https://github.com/defunkt/gist/blob/v6.0.0/lib/gist.rb#L466-L468"},{"source":"nvd","sourceId":"CVE-2026-105221","modified":"2026-10-06T16:08:43.180","url":"https://github.com/defunkt/gist/blob/v6.0.0/lib/gist.rb#L466-L468"},{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://github.com/defunkt/gist/blob/v6.0.0/lib/gist.rb#L466-L468"}]},{"url":"https://github.com/defunkt/gist/commit/07ccc1a6d46e9d36f0e85d0b1c5d795890ae6bcf","tags":["patch","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","url":"https://github.com/defunkt/gist/commit/07ccc1a6d46e9d36f0e85d0b1c5d795890ae6bcf"},{"source":"nvd","sourceId":"CVE-2026-105221","modified":"2026-10-06T16:08:43.180","url":"https://github.com/defunkt/gist/commit/07ccc1a6d46e9d36f0e85d0b1c5d795890ae6bcf"},{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://github.com/defunkt/gist/commit/07ccc1a6d46e9d36f0e85d0b1c5d795890ae6bcf"}]},{"url":"https://www.vulncheck.com/advisories/gist-rubygem-before-6.1.0-disabled-tls-certificate-verification","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-04T22:31:47.153Z","url":"https://www.vulncheck.com/advisories/gist-rubygem-before-6.1.0-disabled-tls-certificate-verification"},{"source":"nvd","sourceId":"CVE-2026-105221","modified":"2026-10-06T16:08:43.180","url":"https://www.vulncheck.com/advisories/gist-rubygem-before-6.1.0-disabled-tls-certificate-verification"},{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://www.vulncheck.com/advisories/gist-rubygem-before-6.1.0-disabled-tls-certificate-verification"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105221.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105221.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-105221","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-105221"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-105221","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-105221"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105221","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105221"}]},{"source":"euvd","sourceId":"EUVD-2026-92134","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92134","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-92134","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92134"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/abraxas/cve-2026-105221-gist-tls","source":"poc-in-github","sourceId":"CVE-2026-105221","description":"CVE-2026-105221 - gist RubyGem - High - MITM - GitHub OAuth token theft","modified":"2026-10-07T00:37:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-105221","url":"https://github.com/abraxas/cve-2026-105221-gist-tls"},{"source":"poc-in-github","sourceId":"CVE-2026-105221","modified":"2026-10-07T00:37:04Z","url":"https://github.com/abraxas/cve-2026-105221-gist-tls"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105221.json","productId":"red_hat_products","product":"All currently supported Red Hat products","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","origins":[{"source":"redhat","sourceId":"CVE-2026-105221","modified":"2026-10-06T05:35:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105221.json"}]}],"vendorCoverage":{"total":1,"shown":1,"omitted":0,"source":"redhat"}}